DE102016223533A1 - Method for transmitting messages between control units of a motor vehicle and switch device and motor vehicle - Google Patents

Abstract

The invention relates to a method for transmitting messages (16) between control units (11) of a motor vehicle (10) by means of a switch device (14), wherein the messages (16) at input ports (P1i, ..., Pni) of the switch device (14) ) of the control devices (11) and wherein each of the messages (16) contains an indication of a destination address (18) and a priority level (19). The invention provides that by the switching device (14) per input port (P1i, ..., Pni) for each one or some or all of the priority levels (19) and per predetermined unit of time at most received messages (16) with a total of a predetermined maximum amount of data and the recorded messages (16) are respectively assigned to an output port (P1o, ..., Pno) depending on their destination address (18), and the messages (16) associated therewith at each output port (P1o, ..., Pno). to be sent out. This guarantees time limits for the respective transmission duration.

Description

The invention relates to a method for transmitting messages between control units of a motor vehicle. The messages are transmitted as data packets over a data network in which at least one switch device (switch) forwards or allocates the messages. The invention also includes the said switching device and the motor vehicle with the data network.

In a motor vehicle, a requirement with respect to the temporal behavior is generally made to the data network in order to limit a maximum transmission duration for specific messages, for example a safety-relevant driver assistance system. Timed approaches in the form of data buses, such as FlexRay or the TTEthernet or TTP, are known for this purpose. These are based on a timed schedule or schedule, which must be implemented in all participating ECUs. However, this results in the fact that the entire data network is based on a global static schedule, which requires an adaptation for all control units, if a new control unit is to be retrofitted.

From the DE 103 09 164 A1 For example, a method for providing a schedule in a so-called switched network is known. Data telegrams to be transmitted in real time are transmitted separately from other data telegrams. However, this means that the real-time data telegrams must wait while the other data telegrams are being transmitted.

From the DE 10 2011 076 357 A1 For example, in the case of an aircraft, a data network is known in which data is prioritized in order to favor the forwarding of particularly important data. However, this can not prevent a controller with a large number of unimportant data packets from continuing to hinder network traffic.

From the DE 10 2007 061 986 A1 For example, a method is known for providing packet-based data traffic in a time-controlled bus system, such as the FlexRay bus.

From the WO 2010/136023 A1 For example, a method for optimizing packet-based data transmission is known. Data packets are given a priority here so that they can be transmitted in the local Ethernet network in order of importance. Data packets with a high priority can be routed via a separate queue.

The invention has for its object to be able to limit a maximum delay or latency of at least some of the messages to be transmitted to a predetermined maximum value in a data network of a motor vehicle.

The object is solved by the subject matters of the independent claims. Advantageous developments of the invention are described by the dependent claims, the following description and the figure.

The invention provides a method by means of which messages or messages can be transmitted between control units of a motor vehicle. For this purpose, a switch is used, which is referred to below as a switch device. Another designation for such a switch device is also data switch or bridge. In the context of the invention, a message is to be understood as meaning a data packet which contains or comprises an indication of a destination address and a priority level. The switching device connects network branches of a data network, wherein either a control device or a further switch devices can be connected to each network branch. A network branch may be formed, for example, by a network cable or a radio link. In particular, only one control device or a further switch device is provided per network second maximum. The messages of the control units arrive via a respective network branch at a respective input port of the switch device.

The switch device may recognize at an incoming message where the message is to be forwarded (indicated by the destination address) and (in the case of appropriately tagged frames) how important the message is, i. which priority level the message has. The invention does not start now where it concerns the forwarding of messages depending on their priority, but already at the input port during the reception of each message. By the switching device are per input port for each of the priority levels or even for some or all of the priority levels each per predetermined unit time each received at most so many messages that they correspond to a total of a predetermined maximum amount of data per unit time. For each priority level, at most one maximum amount of data per time unit is accepted. Other messages that arrive within the time unit and through which the maximum amount of data would be exceeded are therefore rejected. Only the recorded messages are then each an output port depending on their destination address. assigned. At each output port, the associated messages are then sent out according to their priority.

As a result of the invention, there is the advantage that not as many messages are forwarded from one network branch via the switching device to other network branches. Messages of a predetermined priority level can generate only as much data traffic outside the network branch of the sending control device, beyond the switching device in other network branches, as the predetermined maximum amount of data per time unit predetermines or permits. Thus, if a sending controller transmits messages of low priority level, this has only a limited influence on the data communication in other network branches of the data network. Thus, there can not be a "blockage" or overload of output ports of the switch or the switch device by messages of the different priority levels. This guarantees the time properties (eg latency).

The invention also includes optional additional features that provide additional benefits.

Limiting the amount of data to at most or at most the maximum amount of data thus limits the data rate which is received in the form of messages of a respective priority level via the input port or accepted for forwarding. However, it can be problematic when calculating the data rate that the maximum data rate can be exceeded for a short time within the time unit and then only averaged over the entire time unit and then only the permissible maximum data rate results again. However, other messages may be blocked for the period of timeout within the time unit. To avoid this, it may be provided to determine a number of messages at each input port for the priority levels and to limit the number of messages per unit of time. The switch device thus counts with how many messages of the monitored priority level are received. If the maximum number of messages has been reached, no further messages of the priority level are accepted for this time unit. Thus, it can not come to a short-term exceeding a permissible average.

The messages accepted for forwarding are routed in the manner described to the respective output port. At the respective output port, the assigned messages are then preferably transmitted in the order of their priority levels. Thus, the forwarding of messages based on the switching device also takes place in dependence on the priority levels. Thus, a transmission order of the messages is determined according to the priority. Thus, the transmission behavior of the switching device is also controlled by the priority levels.

The value of the maximum amount of data can be determined analytically depending on desired or predetermined transmission latencies. For this, only an offline calculation is necessary, but it is much easier than calculating everything completely during operation. The maximum amount of data defined for at least one priority level can therefore be determined as a function of a maximum value of a transmission delay or latency. This is possible with a motor vehicle since the messages generated by controllers in a motor vehicle are so-called static messages, i. It is known from the outset due to the construction of the motor vehicle, which control unit generates how many messages of which message type in which situation. Now one can assume for each controller a worst case in terms of the number and the transmission time and then determine from the highest (most important) priority level, how many messages are then to be transmitted, and determine which transmission delay may arise for them.

From this, the maximum permissible values (maximum values) for their maximum data quantity then gradually follow for the lower priority levels, if the total amount of data that can ever be transmitted by the switching device in a unit of time is predetermined by design. In the calculation, less low-priority messages are relevant for a message, but in particular the influence of all messages of the same or higher priority (from the same input and from other network branches).

In order to avoid manipulation of the priority level by a control unit, the respective priority level is preferably indicated in the messages by cryptographically encrypted priority data. The control device then decrypts the priority data by means of a cryptographic key. In other words, therefore, the sending controller can register its priority level itself, but must do so by means of cryptographically encrypted priority data, which is accepted by the switching device only if the cryptographic key of the switch device matches the cryptographically encrypted priority data. In this way it can be avoided that a control unit autonomously procures a higher priority level for its messages. Messages whose priority data can not be decrypted by the switch device are discarded. Additionally or alternatively, the switch device internally may have a preferably cryptographically secured Have configuration that should not be manipulated from the outside. If messages with invalid configuration arrive at the switch (ie not in conformity with the switch-internal configuration), the switch can discard them and thus keep the network "clean".

In order to prevent messages from being transmitted simultaneously in a network branch and therefore a reset, it can be provided that the control units also coordinate with one another when sending messages. At least two of the control units then perform a time synchronization of respective timers of the control units with each other. Such a timer may be, for example, a clock or a counter. The synchronized controllers then send out messages with a time delay. The transmission behavior of the control units is thus entangled or interlaced, so that at the switching device alternately or at least individually the messages of both control units arrive without collision. In particular, this is advantageous if the messages of at least one of the two control units represent or transport a video signal or in general a broadband signal. In the context of the invention, a broadband signal is understood to mean a signal whose bandwidth or data rate is greater than 10 percent, in particular greater than 30 or 40 percent, of the net data rate in general of the data network and in particular of the network branch of the control device. Another example of a broadband signal is a radar signal.

Thus, for example, two video streams of two control units can be transferred into one another by the alternating transmission of the messages of both control devices via the data network and / or the switching device.

By limiting the transmission of messages between controllers by the switch device such that excess messages (exceeding the maximum amount of data per unit of time) are ignored or discarded by the switch device, and the switch device at the output ports broadcasts the messages of higher priority level before messages of lower priority level, There is no need for a global schedule or schedule through which the ECUs would need to be implicitly coordinated. Thus, the control units so preferably send their messages regardless of a global schedule or schedule, which would therefore be necessary for the entire motor vehicle or its control units to set transmission times and / or the number of messages for each control unit. So it is not a prior vote of the control units needed. Thus, therefore, a control device can also be installed without an adaptation of the transmission behavior of the other control units would be necessary.

The invention also provides the described switching device for a motor vehicle. The switching device according to the invention thus has connection ports for connecting network branches of a data network. Such a connection port can thus be designed for the electrical and mechanical connection of a network cable of a network branch. At least some of these port ports are for receive port operation and at least some of the port ports are set up to operate as a send port or output port. This can be provided in a manner known per se by providing corresponding receiving circuits and / or transmitting circuits for the respective connection port. In the switching device according to the invention, furthermore, a processor device is provided, which is set up to carry out an embodiment of the method according to the invention. For this purpose, the processor device can have at least one microprocessor and / or at least one microcontroller. Furthermore, the processor device may have a program code which is set up to execute the embodiment of the method according to the invention when executed by the processor device. The program code may be stored in a data memory of the processor device.

The motor vehicle, as also provided by the invention, has a data network in which the control units can exchange messages via the switching device according to the invention. The motor vehicle according to the invention thus has a switch device or a plurality of switch devices via which respective control devices for exchanging messages are coupled. The at least one switching device is an embodiment of the switching device according to the invention. Additionally or alternatively, it can be provided that the control devices are set up to transmit their messages synchronized with each other with a time shift, thereby avoiding a collision of message transmission times. Overall, it is thus ensured in the motor vehicle according to the invention that the control units can send their messages independently of a global schedule or schedule.

The motor vehicle according to the invention is preferably designed as a motor vehicle, in particular as a passenger car or truck.

In the following an embodiment of the invention is described. For this purpose, the single FIGURE (FIG.) Shows a schematic representation of an embodiment of the motor vehicle according to the invention.

The exemplary embodiment explained below is a preferred embodiment of the invention. In the exemplary embodiment, the described components of the embodiment each represent individual features of the invention that are to be considered independently of one another, which also each independently further develop the invention and thus also individually or in a different combination than the one shown as part of the invention. Furthermore, the described embodiment can also be supplemented by further features of the invention already described.

The figure shows a motor vehicle 10 , which may be, for example, a motor vehicle, especially a passenger car or truck. In the motor vehicle 10 can control devices 11 over a data network 12 be coupled with each other. The data network 12 may in particular be an Ethernet network. The data network 12 can network branches 13 each of which may be formed by a network cable, for example. Furthermore, the network branches 13 via switch devices 14 to the data network 12 be interconnected or linked. From the switch devices 14 is shown enlarged to the structure of the switch device 14 to illustrate. The switch device 14 can in a conventional manner port ports P1, P2, P3, ..., Pn have (n is the total number of connection ports). Each connection port can be operated at the same time as the Ingress receive port and as the Egress output port. For this reason, in the figure, the connection ports P1, P2, P3, ..., Pn are represented twice: Thus, the connection port P1 has a reception part P1i and an output part or transmission part P1o. The same is illustrated for the other connection ports P2, P3,..., Pn. Each receiving part represents an input port P1i, P2i, P3i, ..., Pni, each transmitting part an output port P1o, P2o, P3o, ..., Pno.

Each of the controllers 11 can over a network branch 13 be connected to one of the connection ports P1, P2, ..., Pn. The figure shows by way of example how the control unit ECU1 can be connected to the connection port P1, the control unit ECU2 to the connection port P2, and the control unit ECUn to the connection port Pn.

At least one connection port (here eg P3) can be exemplified by another switching device 14 be connected. The connection ports P1, P2, P3,..., Pn can be switched via a switch matrix or switching matrix 15 the switch device 14 be coupled in a conventional manner.

Through the switch device 14 can from the control units 11 and / or from at least one other connected switching device 14 each news 16 be received. Every message 16 can payload 17 and an indication of a destination address 18 and a priority level 19 contain.

Through the switch device 14 a time determinism is ensured, so that a maximum time delay of the messages depending on the respective priority level 19 the message 16 limited or fixed. This assurance of determinism of communication relations of control units 11 also happens to each other without the control units 11 your messages 16 in the data network 12 replace according to a predetermined vehicle schedule.

This results in a flexibility in the data communication by ECUs 11 replaced or removed or new controllers 11 can be added without detracting from the determinism regarding the time delay for messages 16 at least with the highest priority level 19 get lost.

The switch device offers this 14 the possibility of specifying a priority level 19 in a message 16 to structure the data traffic eg in an Ethernet network. The choice of priority levels 19 for news 16 different message types, in combination with limiting the data rate for incoming messages 16 given priority level 19 overall, the assurance of temporal determinism.

At the input ports P1i, P2i, P3i,..., Pni (ingress ports), this is where the incoming messages are received 16 about the data rate for each priority level 19 limited. At the output ports P1o, P2o, P3o, ..., Pno (egress ports) become the messages 16 by the switch device 14 have been accepted or forwarded in order of priority according to the priority level 19 sent.

Thus, so must by the controllers 16 the news 16 according to their communication requirements only by specifying the priority level 19 be prioritized. All switches 14 may be configured so that they do not allow more inbound communication than is set. In other words, at each input port or ingress port, only one maximum amount of data per unit of time and per priority level is transmitted through the respective switch device 14 accepted. At the ports in input ports so is the data rate of incoming messages 16 For example, a maximum amount of data per time window or a maximum number of messages per time window is defined per input port and priority level. At the output ports or egress ports are then sent the accepted or received messages according to their priority level.

Are in the vehicle 10 statically setting all messages, ie the worst case of the number of messages to be transmitted, can be achieved by the combination of limiting the maximum amount of data at the input ports and by prioritizing the output ports for each message 16 the maximum delay in the switch device 14 be calculated. Taking into account the topology or connection structure of the network branches 13 in the data network 12 This can be based on this for the entire connection route or communication connection of two control units 11 determined and thus predicated or ensured.

A time synchronization of control units is not absolutely necessary, but can additionally reduce a guaranteed transmission latency. This can be done by avoiding collision due to two simultaneously sent messages by using synchronized controllers 11 your messages 16 send out with a time delay. Messages of at least the lowest priority level can be accessed by any controller 11 be sent in any number of large numbers, without this would block messages of higher priority levels.

Overall, the example shows how through the invention in a data network of a motor vehicle, a temporal determinism can be ensured by priorities.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 10309164 A1 [0003]
• DE 102011076357 A1 [0004]
• DE 102007061986 A1 [0005]
• WO 2010/136023 Al [0006]

Claims (10)

Method for transmitting messages (16) between control units (11) of a motor vehicle (10) by means of a switch device (14), wherein at inputs (P1i, ..., Pni) of the switch device (14) the messages (16) of the control units (16) 11) and wherein each of the messages (16) includes an indication of a destination address (18) and an indication of a priority level (19) of a plurality of predetermined priority levels, characterized in that by the switch device (14) per input port (P1i, .. ., Pni) are received for one or all or all of the priority levels (19) and per predetermined unit of time at most messages (16) with a total of a predetermined maximum amount of data and the recorded messages (16) depending on their destination address (18) an output port (P1o, ..., Pno) are assigned and at each output port (P1o, ..., Pno) the associated messages (16) are sent out. Method according to Claim 1 , wherein at each input port (P1i, ..., Pni) for the priority levels (19) a number of messages is determined and the number of messages (16) per unit time is limited. Method according to one of the preceding claims, wherein at the output ports (Po1, ..., Pno) the associated messages (16) are transmitted in the order of their priority levels (19). Method according to one of the preceding claims, wherein for at least one priority level (19) a maximum value of a transmission delay is predetermined and the maximum data quantity is determined as a function of the maximum value. Method according to one of the preceding claims, wherein in the messages (16) the respective priority level (19) is specified by cryptographically encrypted priority data and by the switch device (14) the priority data is decrypted by means of a cryptographic key and / or wherein the switch device (14) has a cryptographically secured, internal configuration. Method according to one of the preceding claims, wherein at least two of the control units (11) with each other perform a time synchronization of respective timers of the control units (11) and the synchronized control units (11) send out their messages (16) with a time delay to each other. Method according to Claim 6 wherein the messages (16) of at least one of the two controllers (11) represent a wideband signal whose data rate is at least 10 percent of a net data rate of the data network. Method according to one of the preceding claims, wherein the control units (11) send out their messages (16) independently of a global schedule and in this case a predetermined time limit is ensured for the respective transmission time of the messages. A switching device (14) for a motor vehicle (10), wherein the switch device (14) has connection ports (P1, ..., Pn) for connecting network branches (13) of a data network (12) and at least some of the connection ports (P1, .. ., Pn) for operation as receiving ports (P1i, ..., Pni) and at least some of the port ports (P1, ..., Pn) are arranged for operation as output ports (P1o, ... Pno), characterized in that the switching device (14) comprises a processor device which is set up to execute a method according to one of the Claims 1 to 5 perform. Motor vehicle (10) with at least one switching device (14), via which control devices (11) for exchanging messages (16) are coupled, characterized in that the at least one switching device (14) according to Claim 9 is configured and / or that the control devices (11) are adapted to the method steps according to at least one of Claims 6 to 8th perform.

Images